Caller ID Authentication via Intermediary Server Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems fail to effectively authenticate true caller ID information and detect fraudulent spoofed caller ID, leading to issues in call handling and communication security, particularly in telecommunications and email/postal mail systems.
Innovation Solution
A caller ID authentication system that uses an authentication device to transmit caller and dialed numbers to an authentication server, allowing the called party to verify the authenticity of the caller ID, with features like certification, whitelists, blacklists, and global list management to filter and handle calls based on authentication status.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If caller ID information is transmitted during the ringing signal or call setup before the call is answered, then the called party can see the caller's number, but the caller ID information can be forged or spoofed, compromising security and reliability
Solution Approach 1:
The patent implements preliminary authentication of caller ID information by having the calling party's authentication device transmit calling status messages to the authentication server before the call is answered. The called party's authentication device then verifies this information in advance, allowing the called party to see authentication status indicators (authenticated, spoofed, or irresolute) before deciding whether to answer the call, thus preventing spoofed calls from compromising security
Solution Approach 2:
The patent introduces an authentication server as an intermediary between the calling and called parties. The authentication server receives calling status messages from the caller's authentication device, stores them, and provides verification services to the called party's authentication device. This intermediary system enables independent verification of caller ID authenticity without requiring changes to the existing telephone network infrastructure
2Reliability
If an authentication system is implemented to verify caller ID authenticity, then call security and reliability are improved, but system complexity increases
Solution Approach 1:
The patent divides the authentication system into separate functional components: authentication devices installed at individual subscriber premises, and a centralized authentication server. Each authentication device handles local verification tasks by communicating with the authentication server, while the server manages the database of calling status messages. This segmentation allows the system to be implemented incrementally without requiring complete system replacement
Solution Approach 2:
The authentication device is designed to perform multiple functions: it monitors outgoing calls, transmits calling status messages to the authentication server, receives and processes verification requests from the server, and displays authentication status to the user. This multi-functionality consolidates complex authentication operations into a single device that integrates seamlessly with existing telephone equipment
3Measurement precision
If the authentication device monitors all incoming and outgoing calls and transmits calling status messages, then caller ID authentication accuracy is improved, but loss of time in call processing increases
Solution Approach 1:
The system performs authentication verification in advance during call setup, before the called party answers. The calling party's authentication device transmits the calling status message to the authentication server immediately when the call is initiated, and the called party's authentication device requests verification before the call is connected. This preliminary action ensures accurate verification without delaying the call once answered
Solution Approach 2:
The authentication system operates autonomously without requiring manual intervention from users. The authentication devices automatically monitor calls, transmit verification requests to the authentication server, receive responses, and display authentication status indicators. This self-service operation eliminates time-consuming manual verification steps while maintaining high measurement precision
Data Source
AI summary
Caller ID authentication methodology is used to authenticate call destination and detect call forwarding in a telecommunication system. Call forwarding detection is performed by the called party authentication device transmitting an authentication request message to the authentication server. The authentication request containing the source telephone number of the call and the called party telephone number. The authentication server matches the authentication request message to a calling status message transmitted by the caller party authentication device. The calling status message containing the caller telephone number and the destination telephone number. If the two messages match, the server informs the caller authentication device that the call has reached the intended party and the call destination is authentic. If the two messages do not match or a valid authentication request message has not been received, the authentication server determines the call has not reached the intended destination and the call has been forwarded. Authentication device reputation scores are used to mitigate certain attacks against caller ID and call destination authentication.